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1. Introduction 

One of two most famous quantum algorithms is Grover's search '20' which can 
search among N possibihties in 0{\/N) steps. This provides a quadratic speedup 
over the naive classical algorithm for a variety of search problems [4] . 

Grover's algorithm can be re-cast as computing OR of N bits xi, . . . ,xn^ 
with 0{-\fN) queries to a black box storing xi, . . . , xat. A natural generalization 
of this problem is computing the value of an AND-OR formula of xi, . . . , xm- 

Grover's algorithm easily generalizes to computing AND-OR formulas of 
smah depth d. Then, 0{y/N \og'^~^ N) queries are sufficient to evaluate the for- 
mula [1115] . For balanced formulas (with each AND and OR in the formula having 
the same fan-in), this can be improved to Oi^/N) pTj which is optimal |2]. 

A different case is when, instead of a constant depth, we have a constant fan- 
in. This case has been much harder and, until 2007, there has been no progress 
on it at all. If we restrict to binary AND-OR trees, the classical complexity of 
evaluating a full binary AND-OR tree is Q{N-'^^^-) [25124131) and there was no 
better quantum algorithm known. 

In a breakthrough result, Farhi et al. [T9' showed that the full binary AND-OR 
tree can be evaluated in 0{-sfN) quantum time in an unconventional continuous- 
time Hamiltonian query model of [18|23j . 

Several improvements followed soon. Ambainis et al. [15|6)16|7] translated 
the algorithm of [19j to the conventional discrete time quantum query model 
and extending it to evaluating arbitrary Boolean formulas in 0(iV^/^+°*^^-') steps. 
Reichardt and Spalek [3 0126127] then further extended the algorithm to evaluat- 
ing span programs^ a generalization of Boolean logic formulae. This resulted in a 
surprising result: Reichardt [2 6) showed that the span-program based approach 
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gave nearly-optimal query algorithms for any Boolean function. Also using the 
span program approach, Reichardt |28j gave a better formula evaluation algo- 
rithm, which can evaluate any Boolean formula in 0{^/N log N) steps (instead of 
0(iVi/2+o(i)) in [7 ). 

In this paper, we give a simple description of the basic technical ideas behind 
this sequence of quantum algorithms, by describing how the algorithms of [191 
I15I6I16I7] work for the simplest particular case - the full binary tree. Besides the 
two published algorithms [1917] , we also describe two intermediate versions which 
appeared in the technical reports |15I6] . 

2. Technical preliminaries 

2.1. The problem and motivation 

We consider evaluating a Boolean formula of variables xi, . . . ,xjv consisting of 
ANDs and ORs, with each variable occuring exactly once in the formula. Such a 
formula can be described by a tree, with variables Xi at the leaves and AND/OR 
gates at the internal nodes. This problem has many applications because Boolean 
formulas can be used to describe a number of different situations. The most 
obvious one is determining if the input data xi, . . . ,xn satisfy certain constraints 
that can be expressed by AND/OR gates. 

For a less obvious application, we can view formula evaluation as a black- 
box model for a 2-player game (such as chess) if both players play their optimal 
strategies. In this case, the game can be represented by a game tree consisting of 
possible positions. The leaves of a tree correspond to the possible end positions 
of the game. Each of them contains a variable Xi, with Xi = 1 li the l*** player 
wins and Xi — otherwise. Internal nodes corresponding to positions which the 
I''* player makes the next move contain a value that is OR of the values of their 
children. (The I*'* player wins if he has a move that leads to a position from which 
he can win.) Internal nodes for which the 2"^^ player makes the next move contain 
a value that is AND of the values of their children. (The l**' player wins if he wins 
for any possible move of the 2'^'i player.) 

The question is: assuming we have no further information about the game 
beyond the position tree, how many of the variables Xi do we have to examine to 
determine whether the f** player has a winning strategy? 

2.2. The model 

By standard rules from Boolean logic (de Morgan's laws), we can replace both 
AND and OR gates by NAND gates. A NAND gate NAND{yi, ...,yk) outputs 
1 if AND{yi, . . . ,yk) = (i.e., yi = for at least one i S {!,..., fc}) and 
otherwise. Then, we have a tree with xi, . . . ,xn at the leaves and NAND gates 
at the internal vertices. The advantage of this transformation is that we now have 
to deal with just one type of logic gates (instead of two - AND and OR). 

We work in the quantum query model. In the discrete-time version of this 
model |4ll2j . the input bits xi, . . . ,xn can be accessed by queries O to a black 
box. 



To define O, we represent basis states as \i, z) where i e {0, 1, . . . , A^}. The 
query transformation (where x = (xi, . . . , a; at)) maps |0, z) to |0, z) and |i, z) 
to (— l)^'|i,2;) for i e {1,...,A^} (i.e., we change phase depending on Xi, unless 
i = in which case we do nothing). 

Our algorithm can involve queries Ox and arbitrary non-query transforma- 
tions that do not depend on a;i,...,XAr. The task is to solve a computational 
problem (e.g., to compute a value of a NAND formula) with as few queries as 
possible. 

In the continuous time Hamiltonian model (first considered by Farhi and 
Gutman |18)). instead of unitary oracle Ox, we have a Hamiltonian oracle H^. 
We can define as [17] 

ii\i)^x,\i) 

where i is a register that can hold values 0, 1, . . . , A^. (Similarly to the discrete 
case, ffa:|0) = |0), i.e. we have the option of not querying any Xi.) 

We are allowed to combine with an arbitrary time-dependent Hamiltonian 
Hoit) that does not depend on xi, . . . , xjy. The task is to solve the computational 
problem by running for as little time as possible. 

The continuous time and the discrete query models are roughly equivalent 
|13I14I17] . A discrete query can be simulated using a Hamiltonian oracle. And 
a Hamiltonian query algorithm that uses T queries can be transformed into a 
discrete query algorithm with ©(TlogT/loglogT) queries [17] . 

3. Continuous time quantum algorithms 

3.1. Farhi et al: quantum walk on an infinite line 

Assume that we have a formula described by a full binary NAND tree of depth 
d. (That is, all variables Xi are at depth d. At levels 0,1, . . . ,d — 1, we have 
NAND gates, each of which evaluates NAND of two gates from the next level.) 
We augment this tree: 

1. For each leaf v that contains a variable Xi = 1, we create a new vertex v' , 
with an edge {v,v'). 

2. We take an infinite lined of vertices indexed by integers x, with a vertex x 
connected to vertices x — 1 and x + 1. We connect the root r of our NAND 
tree to the vertex on this line. 

An example of an augmented tree (for depth c? = 2) is shown in Figure [TJ 

We now interpret the adjacency matrix of this augmented tree as a Hamilto- 
nian H. As shown by Farhi et al. ^9\, if we apply this Hamiltonian H for time 
0{\/N) to an appropriately chosen starting state 



finite segment of the line that is sufficiently long in both directions can be used as a good 
approximation to the infinite line. But, for simplicity of the presentation, we will assume that 
an infinite line is being used. 
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Figure 1. An tree augmented by an infinite fine and extra edges. The numbers at leaves show 
the values of the variables. 



i<0 

that has non-zero amphtude only at the locations to the left of (—1, —2, . . .), 
we get a state jV"') with the following properties: 

1. If the tree evaluates to 1, almost of the state \tp') consists of locations to 
the right of 0; 

2. If the tree evaluates to 0, almost of the state 1-0') consists of locations to 
the left of 0; 

Thus, by measuring the state {ip'), we can determine whether the tree evaluates 
to or 1. The behaviour of the algorithm can be understood by expressing 
as a superposition of the energy eigenstates of the Hamiltonian H. Let \iPe) be 
an energy eigenstate of H with an energy E ^ 26. We express 

\iPe) = ^ an\n) + ^ a^\v), 

with \n) being the vertices on the infinite line ( "runway") and \v) being the 
vertices in the tree. One can show that the amplitudes of the vertices on the 
runway are 

_ J e*^" + R{E)e-''^"- if n < . . 

- I r(£;)e*«" if n > ' ^ ^ 

where coefficients R{E) and T{E) depend on the energy E and the structure of 
the tree (i.e., which leaves of the tree contain Xi = I and, therefore, have an extra 
edge attached to them). 

R{E) and T{E) are called reflection and transmission coefficients of the tree, 
by a following physical analogy. We can view tree as an obstacle attached to the 
runway at n = 0. If we have a particle propagating rightwards from the n < 
side, the particle may either get reflected back to n < (in which can it starts 
moving to the left) or it may pass to n > and keep moving to the right. The 
reflection and the transmission coefficients describe the amplitudes of these two 
possibilities. We have 
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Figure 2. A tree augmented by a finite tail and extra edges. 



1. IfF = 0, then T(0) = and R{0) = -1. 

2. IfF = 1, then T(0) = 1 and R{0) = 0. 

Thus, if = 0, we have an eigenstate ji/'o) which has zero amphtudes for 
n > 0. This eigenstate is 



l^o)=E(|-4^)-|-4fc-2)) + ^a, 



(2) 



k>0 



veT 



for some amphtudes a^. If we start in IV'O/H and apply H, the state ji/jo) stays 
unchanged. In contrast, if F = 1, the same state |-0o) is not an eigenstate and 
applying H for sufficiently long time leads to nonzero amplitudes for n > 0. Thus, 
we can distinguish F — and = 1 by preparing Itpo), applying H and measuring 
the state. If we find \n), n > 0, we know that F = 1. 

A slight complication is that the states and \4'start) has equal amplitudes 
on infinitely many states | — 4fc) and \ — 4k — 2) and, thus has an infinite norm. 
This can be avoided by using 



L-l 



^(|-4fc)-|-4fc-2)). 



A;=0 



This state turns out to be a sufficiently good approximation of \ipstart)- 
3.2. Childs et ai: finite segment 

A modification of FGG algorithm was proposed by Childs et al. ^TE\ . 

We can, instead of an infinite line, attach a finite segment of length 2L to 
the root of the tree (see figure [5]). The starting state is similar to the infinite line 
algorithm: 



1 ^ 



-l)'=|2fc) 



^More precisely, we start in a slightly different state \ipstart) = ^2k>0^^ ~ — | — 4fc — 2)) 
instead of |i/'o), since we do not know the amplitudes a„. It can be shown that \^start) is a 
sufficiently good approximation of \i\>q). 



where L — 0{\/N). (Here, |0) denotes the root of the tree and |1), . . . , \2L) denote 
the vertices in the taiL) 

In this case, we have the fohowing behaviour. If _F = 0, the state \4''startl 
remains ahiiost unchanged by H. li F — 1, then, after 0{^/N) steps, the state 
becomes sufficiently different from \tp'start)- More formaUy: 

Lemma 1 1. If F = 0, then there exists \ip) such that H\ijj) — and 

2. If F = 1, then, for any eigenstate of Hamiltonian H, either the corre- 
sponding eigenvalue A satisfies |A| = VL[^=) or \ip) _L \ilistart)- 

Because of that, we can distinguish between the two cases by running the 
eigenvalue estimation j22|9j on state \^start)^ with precision If = 0, we 
get the answer A = 1 with a high probability 1. If = 1, we get a value A 
with |A| > To estimate the eigenvalue with precision it is sufficient and 

necessary to run the Hamiltonian H for time 0{-\/N). 

The computer experiments suggest that we can also distinguish between the 
two cases simply by running the Hamiltonian for time 0{\/N) and measuring the 
final state. If = 0, we find one of basis states \2k) with a high probability. If 
F — 1^ we find one of basis states \v) in the tree. 



4. Discrete time algorithms 

There are two ways to transform the above algorithm into a discrete time quantum 
algorithm, discovered independently by Ambainis [S] and Childs et al. |16) . 

Discrete time algorithm by eigenspace decomposition 

The basic idea behind the algorithm of [6] is as follows. We can decompose the 
continuous time Hamiltonian H as H = Htree + Hinput where Htree is the part 
of H that is independent of xi, . . . , xn and Hinput consists of extra edges that 
are added to the tree if = 1. To obtain similar behaviour in discrete time, we 
define two unitary transformations Utree and Umput that correspond to Htree and 
Hinput and then consider U = UinputU tree- 
In the continuous case we had _F = iff there exists ~ \'ipstart) with 

H\^)^ Htree\i^) + H.nputW = 0. 

In the discrete time, this corresponds to t/|V') = UtreeUinput\fp) = IV')- 

To define Utree and U input, we consider a tree that is augmented by a finite 
tail of length 2L (as in the previous algorithm) but with no extra edges at the 
leaves. Utree is defined by 



Utree\'^) = 



IV-) ifHtreeW=0 

-IV) if i/t.eelV') =A|V), A^O 



Uinput is defined as follows. Uinput\v) = —\v) if u is a leaf containing i : Xi = 1 
and Uinput\v) = I?;) if is a leaf containing i : = or if ^; is an internal vertex. 
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Figure 3. A 0-eigenstate of c is a number tiiat is ciiosen so that the norm of the state is 1. 

If F = 0, there is a state |^o) satisfying Utree\'4>{)) = C^mputlV'o) = l^o) and 
IV'o) ~ lipstart)- In figure [21 we sfiow this state for a NAND tree of depth 2, with 
particular values of variables {xi = = 1, X2 = xa = 0.) 

If F = 1, there is no such state. To see that, we first notice that Utree and 
Uinput are both reflections. Therefore, the spectrum of UmputUtree can be analyzed 
within the "two reflections" framework of Aharonov [1\ and Szegedy [32] ■ We 
show 

Lemma 2 |^ Let Hi be the subspace spanned by \v) for leaves v containing vari- 
ables Xi — 1 and let Pi be the projection to Hi . Assume that, for any 1-eigenvector 
\ip): Utree\'4') — IV") which is not orthogonal to \ipstart), we have 



Then, any eigenvector \tp): U\-ip) — X\'ip) which is not orthogonal to \ipstart) must 
have I A — 1| > e. 

Therefore, to show the desired bound on the eigenvalues oi U {\ — e**, 
= ri(l/e)), it suffices to lower-bound the projections of eigenvectors of Utree to 
Hi. This is done by analyzing the amplitudes of jV') at vertices of the tree that 
evaluate to 1 (either internal vertices which contain a NAND gate whose output 
is 1 or leaves that contain Xi = 1). We start by analyzing the amplitude of the 
root (which evaluates to 1 because F = \) and then move up the tree. See [B] for 
details. 

4-. 2. Discrete time algorithm via Szegedy quantization 

An alternative approach is to construct a quantum algorithm based on discrete 
time quantum walk. As in the previous section, we consider a NAND tree aug- 
mented by a finite tail of even length L = 0{-sfN). We consider a coined quan- 
tum walk on this tree defined in the natural way [3]. The coined walk has the 
state space consisting of states \v,d) where w is a vertex of the augmented tree, 
d € {down, left, right} and: 

• li V ~ L (i.e., V is the end of the tail), then d = left; 

• li V <E {1, . . . ,L — 1} (i.e., V is in the tail but is not the end of the tail), 
then d e {left, right}); 

• If is a non-leaf vertex in the tree, then d G {down, left, right}; 



llA|V')ll>e||^|!. 



• If u is a leaf, then d — down. 



Each such state \v,d) can be associated with one of edges incident to w, in a natural 
way. If w is a vertex in the tail, then states \v,left) and \v, right) correspond to 
edges (v,v + 1) and {v,v — 1), respectively. If u is a vertex in the tree, \v,down) 
corresponds to the edge (w,p) where p is v's parent and \v,left) and \v, right) 
correspond to edges {v,l) and where I and r are u's left and right child. 

A discrete-time quantum walk (also called coined quantum walk) consists of 
two steps: a coin flip C and a shift operator S. The coin flip C is deflned as 
follows: for each we apply a transformation Cy on the subspace Hy spanned by 
states \v,d). More specifically: 

• If u is a leaf, Cy = (—1)^'/ where Xi is the variable at the leaf v. 

• Otherwise, = 2|?/')(i/'| ~ I where \^) is the uniform superposition over 
all possible \d). (For states v e {1, . . . , i — 1} in the tail, \iIj) = -^{\left) + 
\right)). For states v in the tree, jV') — "^(1^'^/^) + V^ght) + \down)).) 

A shift S is just the transformation that, for every edge (f,f') in the augmented 
tree, swaps the two basis states |w, d) and \v' , d') associated with the edge (u, v'). 

There is a close correspondence between the eigenvalues of Hamiltonian H 
(described in section [3. 2 1) and the eigenvalues of the unitary transformation SC . 
Namely, let the starting state be 

1 

IV'.tart) ^^=Y\ (-l)''(|2fc, right) - i\2k + 1, left) + 

i\2k + l,right) -\2k + 2,left)). (3) 



Then, we have: 

1. If = 0, there exists \-ip) such that HIV-) - \ipstart)\\ < e and SC\ip) = i\ip). 

2. If = 1, then, for any eigenstate {ip) (with CS\ip) = X\ip)), either \ip) _L 
I'ipstart) or ReX = c/Vn for some constant c > 0. 

Running the eigenvalue estimation with \ijjstart) as the starting state and accuracy 
c/2^/N allows us to distinguish between the two cases. 

The finite tail can be shortened from L vertices to just 2. Namely [TB], we can 
attach a tail of length 2 consisting of two vertices 1 and 2. For the tree vertices, 
we define quantum walk in the same way as before. For the vertex 1, we define 
Ci =2|V')(V'|-^ where 



^ .\right) + Jl-^\left). 



For the vertex 2, we define C2 — I- 

Then, taking the starting state \'il>start) — |2) gives us the same behaviour as 
we had for the starting state given by (|3]) for the walk with tail of length L. 



5. Further developments 



All of those algorithms can be generalized to evaluating NAND trees of arbitrary 
structure. The key idea is to use a weighted adjacency matrix as the Hamiltonian. 
That is, for every edge (u, v) in the tree, we define a weight that depends 
on the number of leaves in the subtree above u and the number of leaves in the 
subtree above v. We then take the matrix H defined by = if {u,v) is not 
an edge and _ff„„ — w^^y if (u, v) is an edge. 

If a formula F is of depth d, we can choose weights w.^v so that a similar 
quantum algorithm (with the weighted H as the Hamiltonian) evaluates F with 
0{^/ Nd) queries [161617] . For formulas F of large depth d, one should first reduce 
their depth using a following result of Bshouty, Cleve and Eberly : 

Theorem 2 JTOI For any NAND formula F of size N, there exists a NAND for- 
mula F' of size N' = 0{N^^"^'V^^) and depth d' = 0(iV°' V^^) such that 
F' = F. 

By first applying this theorem to reduce the depth and then using the 
0{\/ N'd') query algorithm to evaluate the resulting T', we can evaluate any 
Boolean formula T with (9(ivi/2+o(i/^/T^)) queries |16I6I7| . 

The NAND tree evaluation algorithms have been generalized by Reichardt 
and Spalek jSO] and Reichardt |26I27I28) . They have discovered that similar ideas 
can be used to evaluate span programs (an algebraic computation model which 
generalizes Boolean logic formulas) with the number of queries being square root 
of the witness size of the span program [30] . 

The span program framework is very powerful. It has been used to design 
better quantum algorithms for many specific Boolean formulas (by designing span 
programs for them) [3D]. Moreover, Reichardt [26129] has shown that span pro- 
grams are nearly optimal for any Boolean function. That is, if a Boolean function 
can be evaluated with t queries by some quantum algorithm, then: 

• It can be evaluated by a span-program based quantum algorithm, using a 
generalization of the algorithm from section W?I\ with 0{tj^^) queries 

• It can be evaluated by a span-program based quantum algorithm, using a 
generalization of the algorithm from section W?^ with 0{t) queries 

Span programs also can be used to evaluate any NAND formula (of any depth) 
with 0{\/N log N) queries [28] . 
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